Noel Georgi frezbo
🏠
frezbo
/ cgroup_release_agent_h0nk.sh
Created
November 24, 2020 18:57
Copied from https://ajxchapman.github.io/containers/2020/11/19/privileged-container-escape.html
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/sh | |
| OUTPUT_DIR="/" | |
| MAX_PID=65535 | |
| CGROUP_NAME="xyx" | |
| CGROUP_MOUNT="/tmp/cgrp" | |
| PAYLOAD_NAME="${CGROUP_NAME}_payload.sh" | |
| PAYLOAD_PATH="${OUTPUT_DIR}/${PAYLOAD_NAME}" | |
| OUTPUT_NAME="${CGROUP_NAME}_payload.out" | |
| OUTPUT_PATH="${OUTPUT_DIR}/${OUTPUT_NAME}" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "ignition": { | |
| "version": "2.1.0" | |
| }, | |
| "storage": { | |
| "files": [ | |
| { | |
| "filesystem": "root", | |
| "path": "/etc/modules-load.d/iscsi_tcp.conf", | |
| "mode": 420, |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| set -eu -o pipefail | |
| NUM_OF_PAGES="6" | |
| DOWNLOAD_DIR="/tmp/mando" | |
| mkdir -p "${DOWNLOAD_DIR}" |
frezbo
/ awk_netstat.sh
Created
March 3, 2021 21:04
— forked from staaldraad/awk_netstat.sh
AWK to get details from /proc/net/tcp and /proc/net/udp when netstat and lsof are not available
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Gawk version | |
| # Remote | |
| grep -v "rem_address" /proc/net/tcp | awk '{x=strtonum("0x"substr($3,index($3,":")-2,2)); for (i=5; i>0; i-=2) x = x"."strtonum("0x"substr($3,i,2))}{print x":"strtonum("0x"substr($3,index($3,":")+1,4))}' | |
| # Local | |
| grep -v "rem_address" /proc/net/tcp | awk '{x=strtonum("0x"substr($2,index($2,":")-2,2)); for (i=5; i>0; i-=2) x = x"."strtonum("0x"substr($2,i,2))}{print x":"strtonum("0x"substr($2,index($2,":")+1,4))}' | |
| # No Gawk | |
| # Local | |
| grep -v "rem_address" /proc/net/tcp | awk 'function hextodec(str,ret,n,i,k,c){ |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| apiVersion: v1 | |
| kind: Pod | |
| metadata: | |
| name: honk | |
| namespace: honk | |
| spec: | |
| containers: | |
| - name: honk | |
| image: ghcr.io/frezbo/honkweb:0.1.0 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| H4sIAAAAAAAAA+w6bXhTVZr3prltSltuQaJVrARMWVTUBKiIYySXSeitFC1CB0QRRmiFHQa6mCgq | |
| lMabDJ6N0a6Kw6y74uLoou4M6ipTENr0gwYc0PINbcGCfNwQClVqWwo0877n3tTkzrL6+Dz+2H24 | |
| z9P3nPf7Pe/5Pk3x0tKFixe4mJ/zs8A3dmwultaxuZb40jJ61KhcyxgLYx1jGWMdnTtqzGgrY7GO | |
| sozOZUyWnzUq9XM/6fr1EpOJKVlS/Ozji68s90P8/6PfCmfBRB3LJsVwHXMfw0IZvMlOcbtKNw3L | |
| 6NOxM3cz/QCamCFUVp9g0Z5QZnFMQslkKgXqcXE4k2lPKDPOGRLKeD3FX6qqmJ9QOokuoYzXS8Z2 | |
| vZxG8eCaSQll5jS1nbGpoOrp1b9S1Vypzp5QmlTxWKlG26dXoepVqPKx0qHKOeLk8UtR61eKM+Zn | |
| jsbf1BOueT8lzimgl8z8+C/WXQ+p/q4Up12dvLGSVfX0qg3s+7wHimC8MUGkJcXxB6k48nPWr/bt | |
| 66p5akZP5+mGRaYLkz49OThmg1VlGFVeFxdnY6MSR46Kz/mrQMttGvpbOxR6UEOvuJhHy0oN3a7K | |
| f6ihN+5X6Os0dFNUsfOW1q8az2ot/eOJin+tX9X+Cxp6e69iv1wbzwFFfqmGbtmn0Eu18mq75mvo | |
| mar8HG08rypxztDQmUOKfKGGXq7GI2rz/Ipix66V/0Ch363N50HFjkUbv0ofobWvxm/SjgfVb5Y2 |
This file has been truncated, but you can view the full file.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| f0VMRgIBAQAAAAAAAAAAAAIAPgABAAAAIFJUAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAEAAOAAD | |
| AEAAAAAAAAEAAAAFAAAAAAAAAAAAAAAAAEAAAAAAAAAAQAAAAAAAtGQUAAAAAAC0ZBQAAAAAAAAQ | |
| AAAAAAAAAQAAAAYAAAAAAAAAAAAAAABwVAAAAAAAAHBUAAAAAAAAAAAAAAAAABBjPwAAAAAAABAA | |
| AAAAAABR5XRkBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAA | |
| AAAAALEK3XdVUFghnBINFgAAAAAAkFAAAJBQAMgBAACHAAAADgAAABoDAD+RRYRoPYmm2orMk+JO | |
| 2QgFFnH2JfCwYqZjltpVcydohkP1Iuu5YI5hd7rcnp3QVh3z5guZGHTS+MtREo0Qkkskv6WDmz67 | |
| SwZTeIL9b1hK1VuJj91ZP+eswk/xhVCEpX40nn4LdiU/gXxRVaE9F911CsehI7s/NdxSjGVVwz93 | |
| urAGAOZnKwAwCAoADklkABoDAABuWEgsKe8XmJVyL4tG63YxXXJKAYZtCWZ2acumuPrkxkCow7q/ | |
| 0lLTDlq6+wvq3pa0DrDUSSxIBXUOi51EWFXk7XS/td/Xd+rFdsj5LvUfzlkIa8g0UcxYKOBi3eSp | |
| 4wCb7XTD5PCXF73TfZSFBUFxDph26DHVjXueO34Z2Ad+8N+EOkMqfAs+6k7PxdK0sBc0qgbOswNY |
frezbo
/ gist:ec25a46809a0fc518241563e338d514a
Created
August 15, 2021 17:37
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| U-Boot 2021.04 (Jun 23 2021 - 20:04:26 +0000) | |
| DRAM: 7.9 GiB | |
| RPI 4 Model B (0xd03114) | |
| MMC: mmcnr@7e300000: 1, emmc2@7e340000: 0 | |
| Loading Environment from FAT... Card did not respond to voltage select! : -110 | |
| In: serial | |
| Out: vidconsole | |
| Err: vidconsole | |
| Net: eth0: ethernet@7d580000 |
frezbo
/ cert-manager-irsa-role.tf
Created
October 12, 2021 21:04
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| resource "aws_iam_policy" "eks-role-policy-cert-manager" { | |
| name = "cert-manager-role-policy" | |
| policy = jsonencode({ | |
| Version = "2012-10-17", | |
| Statement = [ | |
| { | |
| Effect = "Allow", | |
| Action = [ | |
| "route53:GetChange" | |
| ], |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| apiVersion: v1 | |
| kind: ServiceAccount | |
| metadata: | |
| name: cloud-controller-manager | |
| namespace: kube-system | |
| --- | |
| apiVersion: rbac.authorization.k8s.io/v1 | |
| kind: ClusterRole | |
| metadata: |